Insteon Hub
Approved changes feed: RSS · Atom
cpe:2.3:h:insteon:hub:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Insteon (7b3e838e-214f-5b6e-a9e1-be9bcbb5f079) |
|---|---|
| Product | Hub (88f771b6-a147-555d-b90b-b876e5bdb7c0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-3834 |
not_vulnerable | 2026-06-08 05:11:41.327649 |
Details available
HIGH (8.7)
An exploitable permanent denial of service vulnerability exists in Insteon Hub running firmware version 1013. The firmware upgrade functionality, triggered via PubNub, retrieves signed firmware binaries using plain HTTP requests. The device doesn't check the kind of firmware image that is going to be installed and thus allows for flashing any signed firmware into any MCU. Since the device contains different and incompatible MCUs, flashing one firmware to the wrong MCU will result in a permanent brick condition. To trigger this vulnerability, an attacker needs to impersonate the remote server "cache.insteon.com" and serve a signed firmware image.
Published: 2018-08-02T19:00:00.000Z
Updated: 2024-08-05T04:57:23.574Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16347 |
not_vulnerable | 2026-06-08 05:09:00.361750 |
Details available
HIGH (8.5)
An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01e7d4 the value for the s_vol key is copied using strcpy to the buffer at 0xa0001700. This buffer is maximum 12 bytes large (this is the maximum size it could be, it is possible other global variables are stored between this variable and the next one that we could identify), sending anything longer will cause a buffer overflow.
Published: 2018-08-02T19:00:00.000Z
Updated: 2024-08-05T20:20:05.640Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16346 |
not_vulnerable | 2026-06-08 05:09:00.361436 |
Details available
HIGH (8.5)
An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c368 the value for the s_mac key is copied using strcpy to the buffer at 0xa000170c. This buffer is 25 bytes large, sending anything longer will cause a buffer overflow. The destination can also be shifted by using an sn_speaker parameter between "0" and "3".
Published: 2018-08-02T19:00:00.000Z
Updated: 2024-08-05T20:20:05.614Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16345 |
not_vulnerable | 2026-06-08 05:09:00.361117 |
Details available
HIGH (8.5)
An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c318 the value for the s_port key is copied using strcpy to the buffer at 0xa00017f4. This buffer is 6 bytes large, sending anything longer will cause a buffer overflow. The destination can also be shifted by using an sn_speaker parameter between "0" and "3".
Published: 2018-08-02T19:00:00.000Z
Updated: 2024-08-05T20:20:05.557Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16344 |
not_vulnerable | 2026-06-08 05:09:00.360792 |
Details available
HIGH (8.5)
An attacker could send an authenticated HTTP request to trigger this vulnerability in Insteon Hub running firmware version 1012. At 0x9d01c2c8 the value for the s_url key is copied using strcpy to the buffer at 0xa0001a0c. This buffer is 16 bytes large, sending anything longer will cause a buffer overflow. The destination can also be shifted by using an sn_speaker parameter between "0" and "3".
Published: 2018-08-02T19:00:00.000Z
Updated: 2024-08-05T20:20:05.577Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16343 |
not_vulnerable | 2026-06-08 05:09:00.360449 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16342 |
not_vulnerable | 2026-06-08 05:09:00.360124 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16341 |
not_vulnerable | 2026-06-08 05:09:00.359802 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16340 |
not_vulnerable | 2026-06-08 05:09:00.359460 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16339 |
not_vulnerable | 2026-06-08 05:09:00.359084 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16338 |
not_vulnerable | 2026-06-08 05:09:00.358665 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16336 |
not_vulnerable | 2026-06-08 05:09:00.345572 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16335 |
not_vulnerable | 2026-06-08 05:09:00.345231 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16334 |
not_vulnerable | 2026-06-08 05:09:00.344869 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16333 |
not_vulnerable | 2026-06-08 05:09:00.344523 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16332 |
not_vulnerable | 2026-06-08 05:09:00.344170 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16321 |
not_vulnerable | 2026-06-08 05:09:00.340238 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16320 |
not_vulnerable | 2026-06-08 05:09:00.339732 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16319 |
not_vulnerable | 2026-06-08 05:09:00.339375 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16318 |
not_vulnerable | 2026-06-08 05:09:00.339008 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16317 |
not_vulnerable | 2026-06-08 05:09:00.338552 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16316 |
not_vulnerable | 2026-06-08 05:09:00.338208 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16315 |
not_vulnerable | 2026-06-08 05:09:00.337858 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16314 |
not_vulnerable | 2026-06-08 05:09:00.337493 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16313 |
not_vulnerable | 2026-06-08 05:09:00.337147 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16312 |
not_vulnerable | 2026-06-08 05:09:00.336798 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16311 |
not_vulnerable | 2026-06-08 05:09:00.336504 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16310 |
not_vulnerable | 2026-06-08 05:09:00.336163 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16309 |
not_vulnerable | 2026-06-08 05:09:00.335820 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16308 |
not_vulnerable | 2026-06-08 05:09:00.335481 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16307 |
not_vulnerable | 2026-06-08 05:09:00.335119 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16306 |
not_vulnerable | 2026-06-08 05:09:00.334767 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16305 |
not_vulnerable | 2026-06-08 05:09:00.334430 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16304 |
not_vulnerable | 2026-06-08 05:09:00.334073 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16303 |
not_vulnerable | 2026-06-08 05:09:00.333717 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16302 |
not_vulnerable | 2026-06-08 05:09:00.333366 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16301 |
not_vulnerable | 2026-06-08 05:09:00.333008 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16294 |
not_vulnerable | 2026-06-08 05:09:00.318934 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16293 |
not_vulnerable | 2026-06-08 05:09:00.318597 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16292 |
not_vulnerable | 2026-06-08 05:09:00.318246 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16291 |
not_vulnerable | 2026-06-08 05:09:00.317876 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16290 |
not_vulnerable | 2026-06-08 05:09:00.317518 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16289 |
not_vulnerable | 2026-06-08 05:09:00.317051 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16288 |
not_vulnerable | 2026-06-08 05:09:00.316684 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16287 |
not_vulnerable | 2026-06-08 05:09:00.316334 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16286 |
not_vulnerable | 2026-06-08 05:09:00.315960 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16285 |
not_vulnerable | 2026-06-08 05:09:00.315613 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16284 |
not_vulnerable | 2026-06-08 05:09:00.315261 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16283 |
not_vulnerable | 2026-06-08 05:09:00.314910 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16282 |
not_vulnerable | 2026-06-08 05:09:00.314546 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16281 |
not_vulnerable | 2026-06-08 05:09:00.314196 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16280 |
not_vulnerable | 2026-06-08 05:09:00.313829 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16279 |
not_vulnerable | 2026-06-08 05:09:00.313471 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16278 |
not_vulnerable | 2026-06-08 05:09:00.313087 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16277 |
not_vulnerable | 2026-06-08 05:09:00.312721 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16276 |
not_vulnerable | 2026-06-08 05:09:00.312344 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16275 |
not_vulnerable | 2026-06-08 05:09:00.311850 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16274 |
not_vulnerable | 2026-06-08 05:09:00.311494 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16273 |
not_vulnerable | 2026-06-08 05:09:00.311134 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16272 |
not_vulnerable | 2026-06-08 05:09:00.310756 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16271 |
not_vulnerable | 2026-06-08 05:09:00.310397 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16270 |
not_vulnerable | 2026-06-08 05:09:00.309826 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16269 |
not_vulnerable | 2026-06-08 05:09:00.309454 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16268 |
not_vulnerable | 2026-06-08 05:09:00.309079 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16267 |
not_vulnerable | 2026-06-08 05:09:00.308723 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16266 |
not_vulnerable | 2026-06-08 05:09:00.308369 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16265 |
not_vulnerable | 2026-06-08 05:09:00.307989 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16264 |
not_vulnerable | 2026-06-08 05:09:00.307605 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16263 |
not_vulnerable | 2026-06-08 05:09:00.307111 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16262 |
not_vulnerable | 2026-06-08 05:09:00.306757 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16261 |
not_vulnerable | 2026-06-08 05:09:00.306387 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16260 |
not_vulnerable | 2026-06-08 05:09:00.305994 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16259 |
not_vulnerable | 2026-06-08 05:09:00.305647 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16258 |
not_vulnerable | 2026-06-08 05:09:00.305277 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16257 |
not_vulnerable | 2026-06-08 05:09:00.304878 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16256 |
not_vulnerable | 2026-06-08 05:09:00.304388 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-14454 |
not_vulnerable | 2026-06-08 05:08:49.975537 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-14452 |
not_vulnerable | 2026-06-08 05:08:49.973507 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-14447 |
not_vulnerable | 2026-06-08 05:08:49.967993 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-14446 |
not_vulnerable | 2026-06-08 05:08:49.966132 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-14445 |
not_vulnerable | 2026-06-08 05:08:49.965777 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-14444 |
not_vulnerable | 2026-06-08 05:08:49.965309 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4859 |
not_vulnerable | 2026-06-08 05:04:50.029558 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.